For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAzure Solutions Architect Expert (AZ-305)Azure Solutions Architect Expert AZ-305 Practice Exam 4Question 18
    Easy1 markMultiple Choice
    Domain 1.4: Design Identities and Access for ApplicationsIdentityManaged IdentityApp Service

    AZ-305 · Question 18 · Domain 1.4: Design Identities and Access for Applications

    You are designing an application architecture where an Azure App Service web app needs to securely access an Azure SQL Database and an Azure Storage Account.

    Security policies require that no credentials, connection strings, or secrets be stored in the application code or configuration files. The identity used for access must be automatically managed by Azure and tied to the lifecycle of the App Service.

    Which identity solution should you recommend?

    Answer options:

    A.

    User-assigned Managed Identity

    B.

    System-assigned Managed Identity

    C.

    Service Principal with a client secret stored in Azure Key Vault

    D.

    Azure AD B2C Application Registration

    How to approach this question

    Match 'tied to the lifecycle of the App Service' with System-assigned. User-assigned has an independent lifecycle.

    Full Answer

    B.System-assigned Managed Identity✓ Correct
    System-assigned Managed Identity
    A System-assigned Managed Identity is tied directly to the lifecycle of the Azure resource it is enabled on. It allows the App Service to authenticate to Azure SQL and Storage using Microsoft Entra ID without storing any credentials in code. When the App Service is deleted, Azure automatically cleans up the identity.

    Common mistakes

    Choosing User-assigned Managed Identity. User-assigned is better when multiple resources need to share the same identity, but it violates the 'tied to the lifecycle' constraint.
    Question 17All questionsQuestion 19

    Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 4

    55 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...MediumQ02CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...MediumQ03CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...HardQ04CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...MediumQ05CASE STUDY: Tailspin Toys Tailspin Toys is a global manufacturing company with 50,000 employees ...Hard
    View all 55 questions →